note 105279 added to filter.filters.sanitize

Just a hint I tested, You can obtain all the chars <32 (so newline and c.return), by using not operator > !FILTER_FLAG_STRIP_LOW as the last argument. Example: filter_input(INPUT_GET,'test',FILTER_SANITIZE_STRING,!FILTER_FLAG_STRIP_LOW); The filter keeps working as before removing anything else as before apart from FILTER_FLAG_STRIP_LOW. Just filter those "bad" chars <32 manually you don't want. ---- Server IP: 212.124.37.9 Probable Submitter: 217.86.100.70 ---- Manual Page -- http://www.php.net/manual/en/filter.filters.sanitize.php Edit -- https://master.php.net/note/edit/105279 Del: integrated -- https://master.php.net/note/delete/105279/integrated Del: useless -- https://master.php.net/note/delete/105279/useless Del: bad code -- https://master.php.net/note/delete/105279/bad+code Del: spam -- https://master.php.net/note/delete/105279/spam Del: non-english -- https://master.php.net/note/delete/105279/non-english Del: in docs -- https://master.php.net/note/delete/105279/in+docs Del: other reasons-- https://master.php.net/note/delete/105279 Reject -- https://master.php.net/note/reject/105279 Search -- https://master.php.net/manage/user-notes.php